Senior IT Security Engineer at Codeway
May no longer be active — verify on the employer site
At a glance
- Company
- Codeway
- Location
- Spain
- Work arrangement
- On-site
- Employment type
- Full-time
- Experience
- 5–10 years
- Working hours
- 40 hours
- Visa sponsorship
- Offered, according to the listing
- Posted
- Added to The Stack
✨ The Stack take on this Codeway job
- 🏢 Codeway has 3 jobs here, 3 with visa sponsorship see all
- 🛂 Visa: Highly Qualified Professional permit. Education: Higher education degree guide
- 💡 No salary shown. Ask Codeway if it is above the minimum.
Updated 2026-11-05, from our data and official sources.
Apply for this role at Codeway
Apply with your AI assistant
With The Stack connected to Claude, ChatGPT or Cursor, paste this. Your assistant tailors your CV and cover letter, checks the visa facts and gives you the apply link.
Help me apply to this job on The Stack: https://jobs.trythestack.co/jobs/senior-it-security-engineer-codeway
Not connected yet? Connect in a minute. To help your user apply, call the MCP tool prepare_application with slug "senior-it-security-engineer-codeway": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
About the role
Responsibilities:
- Design, implement, and iterate security controls across identity, endpoints, SaaS platforms, and cloud infrastructure.
- Lead Security Operations: improve monitoring, detection, SIEM/CSPM integrations, and alerting to reduce time-to-detect.
- Run incident response: investigate events, coordinate cross-team response, update playbooks and runbooks.
- Build and operate vulnerability management processes: scanning, triage, prioritization, remediation tracking.
- Strengthen identity controls: MFA, conditional access, privileged access management, device trust, and governance.
- Establish endpoint standards and remediation workflows (EPP/XDR integration, patching, configuration baselines).
- Partner with IT, Engineering, and product teams to evaluate vendor security, onboard SaaS securely, and review architecture.
- Automate repetitive security tasks and integrations via scripting and APIs to scale operations.
- Define and report security metrics that inform prioritization and demonstrate control effectiveness.
Requirements:
- Proven experience building security controls in cloud-first environments (identity, SaaS, endpoints, cloud).
- Hands-on incident response and security operations experience with SIEM/XDR/CSPM tooling.
- Strong fundamentals in identity management (Okta/Google Workspace), MFA, conditional access and PAM.
- Experience with vulnerability management, endpoint security, and secure cloud configuration (AWS/GCP).
- Practical scripting or API automation skills to integrate tools and reduce manual work (e.g., Python, Terraform, REST APIs).
- Ability to work collaboratively with IT and engineering stakeholders and to build pragmatic, business-aligned security solutions.
Responsibilities
Design and implement security controls across identity, endpoints, SaaS platforms, and cloud infrastructure to support company growth. Lead security operations, incident response, and vulnerability management while automating workflows to reduce manual effort.
Requirements
Requires experience building security controls in cloud-first environments and collaborating with IT and Engineering stakeholders. Candidates should possess strong fundamentals in identity and cloud security and the ability to automate workflows via scripting or APIs.
Key skills
- Security Operations — in 3 other listings on The Stack
- Incident Response — in 64 other listings on The Stack
- Identity And Access Management — in 11 other listings on The Stack
- Endpoint Security — in 5 other listings on The Stack
- SaaS Security — in 6 other listings on The Stack
- Cloud Security — in 71 other listings on The Stack
- Vulnerability Management — in 22 other listings on The Stack
- Security Automation — in 5 other listings on The Stack
- Scripting
- API Integration
- Security Governance
- Compliance
- Risk Management
- Architecture Review
- SIEM
- CSPM
On The Stack (as of 2026-11-05)
Frequently asked questions about Codeway
Is this Senior IT Security Engineer role still open?
It was posted on 2026-07-06. Listings more than 30 days old may no longer be active, so check Codeway's site before applying.
Does Codeway offer visa sponsorship?
This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Codeway's site.
Where is this role located?
The listing gives the location as Spain. It is marked on-site.
What skills does this role ask for?
The listing names: Security Operations, Incident Response, Identity And Access Management, Endpoint Security, SaaS Security, Cloud Security, Vulnerability Management, Security Automation, Scripting, API Integration, Security Governance, Compliance, Risk Management, Architecture Review, SIEM, CSPM.